Offline Secure Storage for OT Golden Images, Configs and Recovery Evidence
Plant managers, OT engineers, control-system owners and the CISO all rely on the same small set of files when something stops the line. Offline Secure Storage takes those files off the corporate and OT networks so they cannot be reached, encrypted or weaponised between sessions.
- SCADA/PLC ransomware
- ICS remote-access abuse
- Firmware and update tampering
- Safety-system compromise
Offline Secure Storage® keeps a clean copy on hardware that is physically disconnected.
Operational Technology Reality
Operational technology environments were never designed to sit behind the same identity perimeter as office IT, yet that is exactly where most engineering data, control logic and safety files now live. NCSC guidance and IEC 62443 both require segregation between the management plane and the systems that run physical processes. Firevault gives OT teams an offline vault for golden-image backups, configuration files and incident-response material that an IT-side ransomware event cannot reach.
- Average breach cost in industrial sectors, the highest year-on-year rise of any vertical
- $5.56MAverage breach cost in industrial sectors, the highest year-on-year rise of any verticalIBM Cost of a Data Breach 2024
- Year-on-year increase in ransomware attacks against industrial organisations
- +87%Year-on-year increase in ransomware attacks against industrial organisationsDragos ICS/OT Cybersecurity Year in Review 2024
- Cost to the UK economy of the JLR ransomware attack, the most expensive cyber attack in UK history
- £1.9BCost to the UK economy of the JLR ransomware attack, the most expensive cyber attack in UK historyThe Guardian, October 2025
- Average time to restore production after a destructive OT incident
- 5+ daysAverage time to restore production after a destructive OT incidentDragos ICS/OT Cybersecurity Year in Review 2024
Why OT data is uniquely exposed.
Legacy and Mixed Fleets
OT estates run a long tail of operating systems, embedded devices and one-off integrations that no modern endpoint tool can fully cover.
No Clean Restore Path
When a line stops, recovery depends on whether the last known-good golden image and PLC configuration are still trustworthy and reachable.
Cost of Every Lost Minute
Manufacturing, utilities and critical-infrastructure operators measure incidents in hours of stopped production and millions in lost output.
This is already happening to OT estates.
Every incident below is a matter of public record. Each one involved data that was reachable from a live network at the moment of compromise.
Jaguar Land Rover: £1.9bn Cost to UK Economy
A ransomware attack halted production at all JLR factories and affected over 5,000 supply-chain businesses, the most expensive cyber attack in UK history.
The Guardian, October 2025
Clorox: ~$356M Hit From Production Outage
A 2023 cyber attack disrupted manufacturing and order processing across Clorox plants, with the company reporting around $356 million in damages and lost sales.
Reuters, 2023
Norsk Hydro: LockerGoga Forced Manual Operations
The aluminium producer reverted to manual operations across smelters and extrusion plants after LockerGoga ransomware encrypted IT and OT systems, with losses of about NOK 800 million.
Norsk Hydro, 2019
Colonial Pipeline: Fuel Supply Across the US East Coast Halted
A ransomware attack on the operator of the largest US fuel pipeline forced a six-day shutdown and triggered an emergency declaration across 18 states.
US CISA, 2021
We Think This Is Hard to Ignore
Ransomware attacks against industrial organisations are at record highs, and a single OT incident can cost more than the cyber-insurance market is willing to underwrite. Under NIS2 and the Cyber Assessment Framework, operators are now expected to demonstrate resilient networks and systems with evidence, not assertion. At Firevault, golden images and control-system configurations live on hardware that physically disconnects between sessions, because the only data an attacker cannot weaponise is data they cannot reach.
The Scenario
A line stops. The clock starts.
An attack reaches the OT network and HMIs go dark. The control engineer pulls the last validated golden image and the matching PLC configuration from the Firevault Vault. Hashes are checked against the recovery runbook. The site is back inside the recovery time objective, the safety case is intact, and the regulator receives a complete, time-stamped audit trail. The master copies were never reachable to the attacker, so they could never be tampered with.
"When the line stops, the only copy that matters is the one no attacker can reach."
Disconnect to protect every plant, line and engineering record.
Golden images, PLC and HMI configurations, SCADA project files, engineering drawings and recovery evidence are written to dedicated drives inside a Firevault Bunker. Those drives have no internet connection, no IP address and no API. The Primary End User wakes the Vault using non-IP technology, then authenticates with multi-factor and timed-access protocols. A nominated Vault Buddy preserves continuity if a key engineer leaves the site. Customers choose how data is written into OSS today, and an offline secure backup and recovery option from Firevault is on the roadmap for operators who want a single supplier for both layers. Every attempt and every action is logged, giving the board, the regulator and the cyber-insurer a defensible audit trail.
- Golden images and configurations placed on hardware with no network connection. They cannot be scanned, ransomed or exfiltrated remotely from the IT or OT network
- Multi-factor authentication and timed-access SOPs governed by the Primary End User, with controlled sharing for OEMs, integrators and incident responders
- Vault Buddy continuity ensures the data remains operational through shift changes, departures and succession events on site
- Full audit logging of every access attempt, supporting NIS2, the Cyber Assessment Framework, IEC 62443 and stronger cyber-insurance positioning
Master Copies of Every OT Endpoint
Step 1 of 4Operator workstations, HMIs, engineering laptops and embedded panels are imaged and written to OSS. Each generation is hashed, validated and indexed against the asset register. When a device fails or is compromised, the last known-good master is restored without touching the live network.
What the regulator says
“Backups of OT configuration and control data must be stored on media or systems that are not permanently connected to either the OT or IT network.”
Featured In
Choose your protection
Which Offline Secure Storage® fits securing the ot estate?
Every tier is the same physical principle at a different scale. Pick the access pattern that matches how your team works, then see the capacity, price and use cases for it.
300GB
Low Use Vault, Deep Cold Storage
£74.99/mo
inc. VAT · £0 due today
Deep cold storage for decommissioned assets, superseded golden images and historical engineering records. One nominated access day each week within a 12-hour window.
What 300GB holds
Use Cases for Securing the OT Estate
- Decommissioned plant and line records
- Superseded golden images and firmware
- Historical safety case and HAZOP records
- Long-term retention of regulatory submissions
- Closed change-control and MOC archives
Specifications
Capacity
300GB
Access
1 day/week, 12-hour window
Authentication
Identity-locked
Commitment
36 months
Security & Compliance
How to Get Started
Step 1
Discovery Call
Understand what you need to protect and how you operate.
Step 2
Vault Configuration
Select your tier, capacity, and access model.
Step 3
Identity Verification
Complete KYC/AML and set up multi-factor authentication.
Step 4
Go Live
Data ingestion, access policy activation, and ongoing support.
You choose how data is written. We hold it offline.
Firevault is the offline storage layer for the OT estate. Your imaging, snapshot and recovery tooling runs on top, writing golden images, control-system configurations and engineering records onto dedicated, disconnected drives inside a Firevault Bunker.
We work alongside the leading OT-grade backup and recovery vendors so operators keep the engine they trust on the line, while the master copy of every plant lives somewhere with no internet connection, no IP address and no API. An offline secure backup and recovery option from Firevault is on the roadmap for customers who want both layers from a single supplier.
Explore More
Hold Gold Copies Away from Ransomware
Immutable masters of crown-jewel data, beyond network reach.
Learn more about Hold Gold Copies Away from RansomwareGold Copy Backups
Use-case detail for offline gold copies.
Learn more about Gold Copy BackupsNIS2 Compliance
How OSS supports operators of essential services.
Learn more about NIS2 ComplianceOT and Cyber Security (Control)
Path-level governance for OT networks.
Learn more about OT and Cyber Security (Control)Questions